aports/main/gnutls/APKBUILD
Sertonix e1b77cbba8 */*: remove useless -C "$builddir"
The commands are already run in builddir
2025-05-12 20:22:45 +00:00

112 lines
2.6 KiB
Text

# Contriburo: Łukasz Jendrysik <scadu@yandex.com>
# Contributor: Michael Mason <ms13sp@gmail.com>
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
pkgname=gnutls
pkgver=3.8.8
pkgrel=0
pkgdesc="TLS protocol implementation"
url="https://www.gnutls.org/"
arch="all"
license="LGPL-2.1-or-later"
checkdepends="diffutils datefudge"
makedepends="
libidn2-dev
libkcapi-dev
libtasn1-dev
libunistring-dev
linux-headers
nettle-dev
p11-kit-dev
texinfo
zlib-dev
"
subpackages="$pkgname-dbg $pkgname-doc $pkgname-dev $pkgname-utils $pkgname-c++:xx"
_v=${pkgver%.*}
case $pkgver in
*.*.*.*) _v=${_v%.*};;
esac
source="https://www.gnupg.org/ftp/gcrypt/gnutls/v$_v/gnutls-$pkgver.tar.xz
skip-ktls.patch
"
# Upstream Tracker: https://gnutls.org/security-new.html
# secfixes:
# 3.8.5-r0:
# - CVE-2024-28834 GNUTLS-SA-2023-12-04
# - CVE-2024-28835 GNUTLS-SA-2024-01-23
# 3.8.3-r0:
# - CVE-2023-5981
# - CVE-2024-0553
# - CVE-2024-0567
# 3.8.0-r0:
# - CVE-2023-0361
# 3.7.7-r0:
# - CVE-2022-2509 GNUTLS-SA-2022-07-07
# 3.7.1-r0:
# - CVE-2021-20231 GNUTLS-SA-2021-03-10
# - CVE-2021-20232 GNUTLS-SA-2021-03-10
# 3.6.15-r0:
# - CVE-2020-24659 GNUTLS-SA-2020-09-04
# 3.6.14-r0:
# - CVE-2020-13777 GNUTLS-SA-2020-06-03
# 3.6.13-r0:
# - CVE-2020-11501 GNUTLS-SA-2020-03-31
# 3.6.7-r0:
# - CVE-2019-3836
# - CVE-2019-3829
# 3.5.13-r0:
# - CVE-2017-7507
prepare() {
default_prepare
# tries to do local networking, "Failed to connect to server"
sed -i 's/cert-reencoding.sh//' tests/Makefile*
}
build() {
./configure \
--build=$CBUILD \
--host=$CHOST \
--prefix=/usr \
--sysconfdir=/etc \
--mandir=/usr/share/man \
--infodir=/usr/share/info \
--enable-ktls \
--disable-openssl-compatibility \
--disable-rpath \
--disable-static \
--disable-valgrind-tests
make
}
check() {
# millis, 100s
export GNUTLS_TEST_TIMEOUT=100000
make check || {
cat tests/test-suite.log
return 1
}
}
package() {
DESTDIR="$pkgdir" make install
}
utils() {
license="GPL-3.0-or-later"
pkgdesc="Command line tools for TLS protocol"
mkdir -p "$subpkgdir"/usr/
mv "$pkgdir"/usr/bin "$subpkgdir"/usr/
}
xx() {
pkgdesc="The C++ interface to GnuTLS"
mkdir -p "$subpkgdir"/usr/lib
mv "$pkgdir"/usr/lib/lib*xx.so.* "$subpkgdir"/usr/lib/
}
sha512sums="
4f617c63e8e8392e400d72c9e39989fcd782268b4a4c4e36bbfb0444a4b5bcb0f53054f04a6dce99ab89c0f38f57430c95aaaec6eb9209b8e9329140abf230c3 gnutls-3.8.8.tar.xz
07a1e56b8d821594c1ac00947fcd8ec40e3f49decc67574a8edcbdfb1181f925e5f46cc01879bc1118fbf29f78479953592efd4b6dae8e035d0aeaf79fdc0e06 skip-ktls.patch
"